Assurance

["Dunker, Mary" <>]

I'm curious as to how other institutions will handle some of the requirements 
in the FICAM section of the InCommon Assurance Addendum 
http://www.incommon.org/docs/assurance/Assurance_Addendum.pdf 

User notification and "opt in" procedures would probably be much easier if 
something like uApprove were in place, but for institutions where uApprove is 
not implemented, how are you planning to satisfy item number 1?

1. Use of the IdP to connect with federal agency applications Personnel and 
students who are required to make use of the
IdP to connect with a federal agency application for business or educational 
purposes are given written notice, prior to the
First use of the IdP for that purpose, regarding the federal agency 
application and identity information that will be transmitted to it. Written 
notice may be in paper or electronic form.

The additional guidance in section 2.1.1 at 
http://www.idmanagement.gov/documents/Guidance_for_Assessors.pdf mentions an 
opt-in process and notice that could be particularly difficult to deliver in 
real-time.

Complying with other items may be equally challenging, so any thoughts would 
be appreciated.

Mary

-----------------------------------------------------------------
Mary Dunker
Director, Secure Enterprise Technology Initiatives
Virginia Tech Information Technology
1700 Pratt Drive
Blacksburg, VA 24060
540-231-9327

 
--------------------------------------------------------------------